Azure Analysis Services是否支持服务主体登录SQL Azure [英] Does Azure Analysis Services support service principal signon to SQL Azure

问题描述

我有一个Azure Analysis Services模型，使用此连接字符串从SQL Azure中读取数据:

I have an Azure Analysis Services model reading data out of SQL Azure with this connection string:

Data Source=MySQLAzureDB.database.windows.net;
Initial Catalog=MyDB;Persist Security Info=true;
User ID=MyUser;Password=MyPWD;
Encrypt=True;Authentication=Sql Password

这使用 SQL用户连接到SQL Azure.这意味着我需要在两个单独的地方定义用户名/密码:在SQL Azure以及此连接字符串中.

This uses a SQL User to connect to SQL Azure. This means I need to define user/password in two seperate places: in SQL Azure as well as in this connection string.

我想使用服务主体而不是SQL用户.有人做过吗?

I would like to use a service principal instead rather than a SQL user. Has anyone done this before?

我尝试使用不同的连接类型，但这是我在连接字符串中使用Authentication=ActiveDirectoryPassword时来自AAS的典型错误:

I've tried using different connection types but this is the typical error from AAS when I use Authentication=ActiveDirectoryPassword in my connection string:

JSON DDL请求失败，出现以下错误:无法执行XMLA.返回错误:无法加载adalsql.dll >>(Authentication = ActiveDirectoryPassword)

The JSON DDL request failed with the following error: Failed to execute XMLA. Error returned: 'Unable to load adalsql.dll >> (Authentication=ActiveDirectoryPassword)

所以之前，我需要进行进一步的调查，之前有没有人这样做过?错误消息似乎表明该关键库尚未安装.

So before I undertake any further investigation, has any one done this before? The error message appears to indicate that this critical library has not been installed.

我有一些使用服务主体的经验.我必须连接到AAS并使用服务主体使用Azure Automation处理数据库.这里的一些背景:

I have some prior experience using service principals. I have to connected to AAS and processed a database with Azure Automation using the service principal. Some background on this here:

推荐答案

我认为AAS不支持它.我们计划扩展SQL驱动程序，以支持交互式模式，在该模式下，需要通过交互式对话框来请求密码. 你也可以尝试 MSI到Azure SQL(从Windows VM): https://docs.microsoft.com/azure/active-directory/msi-tutorial-windows-vm-access-sql 虽然不是您要找的东西.

I think it is unsupported for AAS. We have plans to extend SQL driver allowing to support interactive mode where password is requested via an interactive dialog. Also you may try MSI to Azure SQL (from Windows VM): https://docs.microsoft.com/azure/active-directory/msi-tutorial-windows-vm-access-sql Although it's not quite what you are looking for.

高级PM SQL数据平台Mirek Sztajno

Mirek Sztajno, senior PM SQL Data Platforms

这篇关于Azure Analysis Services是否支持服务主体登录SQL Azure的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！